Skip to content
Noroxi

typecho records

18 published records for vendor typecho.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 23
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

18 records
  • CVE-2018-18753
    40Plan

    Typecho V1.1 allows remote attackers to send shell commands via base64-encoded serialized data, as demonstrated by SSRF.

    CriticalCVSS 9.8No exploitEPSS 3%

    typecho · typechoOct 29, 2018

  • CVE-2023-24114
    39Monitor

    typecho 1.1/17.10.30 was discovered to contain a remote code execution (RCE) vulnerability via install.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    typecho · typechoFeb 22, 2023

  • CVE-2024-35540
    37Monitor

    A stored cross-site scripting (XSS) vulnerability in Typecho v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted

    CriticalCVSS 9.0Proof of conceptEPSS 3%

    typecho · typechoAug 20, 2024

  • CVE-2023-36299
    36Monitor

    A File Upload vulnerability in typecho v.1.2.1 allows a remote attacker to execute arbitrary code via the upload and options-general paramet

    HighCVSS 8.8No exploitEPSS 2%

    typecho · typechoAug 3, 2023

  • CVE-2023-49967
    30Monitor

    Typecho v1.2.1 was discovered to be vulnerable to an XML Quadratic Blowup attack via the component /index.php/action/xmlrpc.

    HighCVSS 7.5No exploitEPSS 1%

    typecho · typechoDec 7, 2023

  • CVE-2024-35539
    26Monitor

    Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function.

    MediumCVSS 6.5Proof of conceptEPSS 1%

    typecho · typechoAug 19, 2024

  • CVE-2024-57369
    25Monitor

    Clickjacking vulnerability in typecho v1.2.1.

    MediumCVSS 6.4No exploitEPSS 0%

    typecho · typechoJan 17, 2025

  • CVE-2020-21038
    24Monitor

    Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php.

    MediumCVSS 6.1No exploitEPSS 0%

    typecho · typechoMay 8, 2023

  • CVE-2023-6615
    21Monitor

    Typecho manage-users.php information disclosure

    MediumCVSS 5.3No exploitEPSS 1%

    typecho · typechoDec 8, 2023

  • CVE-2024-35538
    21Monitor

    Typecho v1.3.0 was discovered to contain a Client IP Spoofing vulnerability, which allows attackers to falsify their IP addresses by specify

    MediumCVSS 5.3Proof of conceptEPSS 1%

    typecho · typechoAug 19, 2024

  • CVE-2017-16230
    21Monitor

    In admin/write-post.php in Typecho through 1.1, one can log in to the background page, write a new article, and add payload in the article c

    MediumCVSS 5.4No exploitEPSS 1%

    typecho · typechoOct 30, 2017

  • CVE-2023-30184
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in Typecho v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted

    MediumCVSS 5.4No exploitEPSS 0%

    typecho · typechoMay 4, 2023

  • CVE-2024-46494
    21Monitor

    A cross-site scripting (XSS) vulnerability in Typecho v1.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload

    MediumCVSS 5.4No exploitEPSS 0%

    typecho · typechoApr 7, 2025

  • CVE-2023-27711
    19Monitor

    Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via the Comment Manager /admi

    MediumCVSS 4.8No exploitEPSS 1%

    typecho · typechoMar 16, 2023

  • CVE-2023-27131
    19Monitor

    Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code viathe Post Editorparameter.

    MediumCVSS 4.8No exploitEPSS 1%

    typecho · typechoMar 16, 2023

  • CVE-2023-27130
    19Monitor

    Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via an arbitrarily supplied U

    MediumCVSS 4.8No exploitEPSS 1%

    typecho · typechoMar 16, 2023

  • CVE-2023-6613
    19Monitor

    Typecho Logo options-theme.php cross site scripting

    MediumCVSS 4.8No exploitEPSS 1%

    typecho · typechoDec 8, 2023

  • CVE-2023-6614
    10Monitor

    Typecho Page manage-pages.php backdoor

    LowCVSS 2.7No exploitEPSS 1%

    typecho · typechoDec 8, 2023